ab7778 Privacy Policy — How We Protect Your Data

ab7778 collects personal information through several channels: directly from you when you register an account or contact support; automatically through your use of the platform; and occasionally from trusted third-party verification and payment partners. The categories of information we collect are described in detail below.

Information you provide directly:

• Full legal name as it appears on your government-issued identity document.
• Date of birth — collected to verify that you are 18 years of age or older.
• Active mobile phone number registered in Bangladesh, used as your primary account identifier and for SMS OTP authentication.
• Residential address within Bangladesh, collected during enhanced verification stages.
• Copies of identity documents such as your Bangladesh National Identity Card (NID), passport, or BRTA driving licence, submitted during KYC verification.
• Payment method details — specifically the mobile wallet account numbers (bKash, Nagad, Rocket, Upay) or bank account details associated with deposits and withdrawals. Note: ab7778 does not store full card numbers; payment processing is handled by our payment partners.
• Communications you send to the ab7778 support team via live chat, email, or any other contact channel.

Information collected automatically:

• Device information including device type, operating system version, browser type and version, and unique device identifiers.
• IP address and approximate geographic location derived from it.
• Session data including login timestamps, session duration, and pages visited within the platform.
• Game activity logs — games played, bet amounts, win/loss outcomes, and transaction history. These logs are required for dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Cookies and similar tracking data as described in the Cookies section of this policy.

Information received from third parties:

• Identity verification results from third-party KYC service providers who cross-reference the documents you submit against official databases.
• Payment confirmation data from bKash, Nagad, Rocket, Upay, and our banking partners — confirming that a transaction was completed, its amount, and the originating account holder name.
• Fraud and risk scoring signals from anti-fraud partners, used to protect all players on the platform from fraudulent activity.

ab7778 processes your personal data only for specific, legitimate purposes that are directly connected to the operation of the platform and the delivery of services to you as a registered player. We do not use your data for purposes that are incompatible with those listed below, and we do not sell your data to advertisers or data brokers.

The primary purposes for which we process your data are:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your login credentials securely.
• Age and identity verification: To confirm that you are 18 years of age or older and that you are who you claim to be, in compliance with our responsible gaming obligations.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain an accurate transaction ledger for your account.
• Customer support: To respond to your queries, investigate complaints, process refund or dispute requests, and maintain a record of communications for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct described in the Terms & Conditions.
• Responsible gaming monitoring: To monitor your gaming activity for signs of problem gambling behaviour and to apply any self-exclusion, deposit limits, or cooling-off periods you have requested.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform and to improve game selection, navigation, and support services.
• Legal and regulatory compliance: To maintain records as required by applicable law, to respond to lawful requests from competent authorities, and to enforce our Terms & Conditions.
• Promotional communications: To send you information about promotions, bonuses, and seasonal offers relevant to your account — only where you have not opted out of such communications. You may opt out at any time by contacting support.

ab7778 does not share your personal data with third parties except in the specific circumstances listed below. Any third party that receives your data is contractually obligated to process it only for the purpose for which it was shared and to maintain confidentiality and security standards equivalent to those applied by ab7778.

Circumstances in which your data may be shared:

• Payment processors and mobile wallet operators: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank receive the transaction data necessary to process your deposits and withdrawals. Each of these providers operates under its own privacy policy and is subject to applicable Bangladesh financial regulations.
• Identity verification (KYC) providers: Third-party KYC service providers receive copies of the identity documents you submit solely for the purpose of verifying your identity and age. They are prohibited from using your data for any other purpose.
• Fraud prevention and risk management partners: Anti-fraud technology providers may receive your IP address, device fingerprint, and anonymised behavioural data for the purpose of calculating fraud risk scores. No full identity data is transmitted to these partners without your knowledge.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may receive your anonymised player session ID for the purpose of delivering their games. They do not receive your name, mobile number, or financial data.
• Legal and regulatory authorities: ab7778 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal order or when we believe disclosure is necessary to prevent serious harm or fraud.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ab7778's operations, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Players will be notified of any such transfer in advance.

ab7778 uses cookies and similar tracking technologies to operate the platform correctly, improve user experience, and gather analytical insights. A cookie is a small text file placed on your device by a website. Cookies do not contain executable code and cannot be used to access other files on your device.

Categories of cookies used on ab7778:

To manage or delete cookies, you can adjust your browser's privacy settings. Most modern browsers — including Chrome, Firefox, Samsung Internet, and Opera Mini (popular among Bangladesh users) — provide granular control over cookie categories. Please note that disabling strictly necessary or security cookies will impair the functionality of your ab7778 account and may prevent you from logging in or completing transactions.

ab7778 does not use third-party advertising cookies or cross-site tracking pixels. No data from your ab7778 session is transmitted to social media platforms or advertising networks.

ab7778 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data (name, mobile number, account settings): Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, to satisfy financial record-keeping obligations and to resolve any post-closure disputes.
• Transaction records (deposit/withdrawal logs, bet history): Retained for a minimum of 7 years from the date of each transaction, consistent with standard financial compliance requirements.
• Identity verification documents (NID copies, passport scans): Retained for the duration of the account plus 5 years, or longer if required by law or ongoing legal proceedings.
• Support communications (chat transcripts, emails): Retained for 3 years from the date of the communication, to allow resolution of delayed or escalated complaints.
• Analytical and session data (anonymised usage logs): Retained for up to 24 months, after which they are automatically purged from active systems.
• Self-exclusion records: Retained indefinitely to prevent re-registration during an active exclusion period and to maintain an audit trail of responsible gaming interventions.

All personal data is stored on servers with physical and logical access controls. Data at rest is encrypted using AES-256 encryption. Regular backup cycles are performed, and backup media is subject to the same access controls and encryption standards as live data.

Where data is processed by third-party partners (KYC providers, payment processors), those partners are contractually required to apply equivalent retention and security standards and to delete data that is no longer needed for the purpose for which it was shared.

ab7778 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our key security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the ab7778 platform uses TLS 1.3 encryption, the current industry standard for secure web communications. This protects your login credentials, personal information, and payment details from interception.
• Two-Factor Authentication (2FA): Every login to your ab7778 account requires a one-time password (OTP) sent via SMS to your registered mobile number, in addition to your standard password. This ensures that even if your password is compromised, unauthorised access is prevented.
• AES-256 Data Encryption at Rest: Personal data and financial records stored in our databases are encrypted using AES-256, the same standard used by major international financial institutions.
• Role-Based Access Controls: Access to player data within ab7778 is strictly limited to authorised personnel whose job function requires it. Access rights are reviewed regularly and revoked immediately upon role change or employment termination.
• Intrusion Detection and Real-Time Monitoring: Our security team operates continuous network monitoring systems that detect and alert on anomalous access patterns, potential intrusion attempts, and unusual data access volumes in real time.
• Regular Security Audits: ab7778 conducts periodic internal security reviews and engages independent security professionals to conduct penetration testing and vulnerability assessments on a scheduled basis.
• Incident Response Plan: In the event of a confirmed data security incident affecting player data, ab7778 will notify affected players promptly and take immediate remediation steps. A documented incident response procedure is maintained and rehearsed regularly.

While ab7778 takes all reasonable and industry-standard measures to protect your data, no online platform can guarantee absolute security against all threats. You are also responsible for maintaining the security of your own account — keep your password strong and unique, never share your OTP with anyone (including individuals claiming to be ab7778 staff), and log out of your account on shared devices.

As a player registered on ab7778, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the ab7778 support team via live chat or email at [email protected]. We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

• Right of Access: You may request a copy of all personal data that ab7778 holds about you. We will provide this in a clear, readable format. Identity verification will be required before any data is released.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your registered name does not match your NID due to a transcription error, we will correct it upon verification of the correct information.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, if you close your account and there is no ongoing legal requirement to retain the data. Note that some data must be retained for the mandatory retention periods described in Section 5, and erasure requests cannot override these legal obligations.
• Right to Data Portability: You may request a structured, machine-readable export of the personal data you have provided to ab7778 (such as account registration details and transaction history), so that it can be transferred to another service if you choose.
• Right to Restrict Processing: In certain circumstances — such as during a dispute about the accuracy of your data — you may request that we restrict active processing of your personal data while the matter is resolved.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on our legitimate interests, though in some cases we may need to demonstrate that our legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for optional promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ab7778 does not charge any fee for exercising your data rights. If a request is manifestly unfounded or excessive (for example, repetitive requests made in bad faith), we reserve the right to charge a reasonable administrative fee or to decline the request, with an explanation provided to the requester.

ab7778 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via SMS to their registered mobile number and will update the "Last Updated" date at the top of this page.

Minor changes — such as corrections to grammar, clarifications that do not alter the substance of a provision, or the addition of new contact details — may be made without direct player notification, though the updated date will always reflect the most recent revision.

Continued use of the ab7778 platform after a Privacy Policy update has been notified to you constitutes your acceptance of the revised policy. If you do not agree with any changes made to this policy, you should stop using the platform and contact support to close your account, after which your data will be handled in accordance with the retention obligations described in Section 5.

Previous versions of this Privacy Policy are available on request by contacting [email protected] — we maintain an archive of all historical policy versions for accountability and transparency purposes.